Lucas Clemente
|
7f907a17c2
|
reduce slice allocations in TruncateConnectionID
|
2016-05-20 01:09:04 +02:00 |
|
Lucas Clemente
|
f86875f746
|
reject small CHLOs to prevent amplification attacks
fixes #1
|
2016-05-19 16:20:22 +02:00 |
|
Lucas Clemente
|
7a97f34fac
|
don't panic 🤓
fixes #93
|
2016-05-18 18:29:42 +02:00 |
|
Lucas Clemente
|
b185ea04e1
|
add CloseRemote method to stream
ref #109
|
2016-05-18 13:33:36 +02:00 |
|
Marten Seemann
|
7105b37f91
|
don't allow renegotiation of flow control parameters
|
2016-05-18 14:03:04 +07:00 |
|
Lucas Clemente
|
d0e6b993bb
|
use new error codes throughout the server
fixes #86
|
2016-05-17 12:49:59 +02:00 |
|
Marten Seemann
|
fb6d90b813
|
cosmetic changes in tests
|
2016-05-16 18:32:08 +07:00 |
|
Lucas Clemente
|
de660dbfc5
|
run gofmt -s on main and server config
|
2016-05-15 14:42:56 +02:00 |
|
Lucas Clemente
|
c12a12518e
|
run gofmt -s on tests
|
2016-05-15 14:42:34 +02:00 |
|
Lucas Clemente
|
9f63cdbd91
|
add stream.StreamID()
|
2016-05-14 13:35:43 +02:00 |
|
Marten Seemann
|
2ac53843ed
|
improve error handling in ConnectionParametersManager
|
2016-05-14 17:30:36 +07:00 |
|
Marten Seemann
|
878d6a7140
|
negotiate maximum number of streams per connection
fixes #20
|
2016-05-14 17:10:49 +07:00 |
|
Marten Seemann
|
16bd559d9a
|
negotiate idle connection state lifetime
work towards #20
|
2016-05-14 16:48:19 +07:00 |
|
Marten Seemann
|
43621c9c25
|
keep separate flow control windows for sending and receiving in ConnectionParametersManager
work towards #19, #20, #39
|
2016-05-14 15:29:15 +07:00 |
|
Lucas Clemente
|
c7126137d1
|
queue undecryptable packets for later decryption & possibly send PRST
fixes #38, fixes #69, fixes #73
|
2016-05-12 16:46:18 +02:00 |
|
Lucas Clemente
|
ea83ca8950
|
implement cert compression with cached certificates
|
2016-05-11 16:30:04 +02:00 |
|
Lucas Clemente
|
7c1e1cde56
|
rename GetCertCompressed to GetCertsCompressed
|
2016-05-11 11:41:44 +02:00 |
|
Lucas Clemente
|
20655bac5a
|
rename GetCertUncompressed to GetLeafCert
|
2016-05-11 11:40:20 +02:00 |
|
Lucas Clemente
|
7609246b45
|
re-add support for version 30
fixes #72
|
2016-05-10 11:05:52 +02:00 |
|
Lucas Clemente
|
f4ac8ff949
|
read SNI from crypto handshake
fixes #48
|
2016-05-08 23:06:18 +02:00 |
|
Lucas Clemente
|
85c39721ec
|
change Signer interface to return errors
|
2016-05-08 22:46:59 +02:00 |
|
Lucas Clemente
|
6738f0eadf
|
add sni to crypto.Signer interface
|
2016-05-08 22:23:36 +02:00 |
|
Lucas Clemente
|
c6fb85be22
|
add handshake message logging
|
2016-05-08 22:09:02 +02:00 |
|
Lucas Clemente
|
ea63fe6205
|
add test asserting ICSL has a default value
|
2016-05-07 17:41:23 +02:00 |
|
Marten Seemann
|
bb807fa5bd
|
implement sending of truncated ConnectionIDs
|
2016-05-06 21:53:21 +07:00 |
|
Lucas Clemente
|
bfe7117329
|
only take specific values from the params map
|
2016-05-06 11:43:39 +02:00 |
|
Lucas Clemente
|
f7d3da74b7
|
connection parameter manager docs
|
2016-05-05 23:36:41 +02:00 |
|
Lucas Clemente
|
7e0d59a5e6
|
make session timeout according to ICSL
fixes #54
|
2016-05-05 23:16:49 +02:00 |
|
Lucas Clemente
|
b239b71bb4
|
add GetIdleConnectionStateLifetime to connection params
|
2016-05-05 22:58:59 +02:00 |
|
Lucas Clemente
|
76d279ed8f
|
make connectionparameters return its map in GetSHLOMap
|
2016-05-05 22:58:52 +02:00 |
|
Marten Seemann
|
6556e2f695
|
use protocol.ByteCount in frames, streams and session
|
2016-05-05 11:53:10 +07:00 |
|
Marten Seemann
|
77f34a9207
|
set initial flow control window from handshake parameters
fixes #50
|
2016-05-05 11:29:12 +07:00 |
|
Lucas Clemente
|
40ee20c02b
|
use a ephermal curve25519 for forward secure key exchange
fixes #17
|
2016-05-04 12:45:25 +02:00 |
|
Marten Seemann
|
d07baef91b
|
manage connection parameters in a separate class
|
2016-05-04 17:20:36 +07:00 |
|
Lucas Clemente
|
daf4e4a867
|
remove support for version 30, since we don't implement FEC at all
|
2016-05-02 20:56:02 +02:00 |
|
Lucas Clemente
|
53ef5669e2
|
fix crypto setup tests
|
2016-05-02 20:52:09 +02:00 |
|
Lucas Clemente
|
6178ef83fe
|
discard undecryptable packets
hopefully fixes issue #33, the workaround is tracked in #38
|
2016-05-02 16:45:26 +02:00 |
|
Lucas Clemente
|
a6d3dca74c
|
re-add crypto test
|
2016-05-02 14:40:43 +02:00 |
|
Lucas Clemente
|
623bf065fd
|
accept null-encrypted pckts until an encrypted pckt has ben received
this should fix issue #33
|
2016-05-02 14:38:05 +02:00 |
|
Lucas Clemente
|
1e8d1453a8
|
implement public reset packet writing
|
2016-04-29 16:12:17 +02:00 |
|
Lucas Clemente
|
607ab843d6
|
close session when crypto stream errors
|
2016-04-27 12:49:55 +02:00 |
|
Lucas Clemente
|
9fc874be53
|
add newline to crypto error messages
|
2016-04-26 15:37:52 +02:00 |
|
Lucas Clemente
|
23a1e08e90
|
make stream private
|
2016-04-25 17:54:00 +02:00 |
|
Lucas Clemente
|
bb3c8b707b
|
fix randomness
|
2016-04-21 13:48:42 +02:00 |
|
Lucas Clemente
|
7efc7f79d2
|
validate that CryptoSetup is an AEAD
|
2016-04-21 13:48:42 +02:00 |
|
Lucas Clemente
|
4e1942a76e
|
improve inchoate CHLO recognition
|
2016-04-19 13:37:59 +02:00 |
|
Lucas Clemente
|
9cbeb49d49
|
change AEAD interface to use byte slices, simplifying its usage
|
2016-04-18 14:37:34 +02:00 |
|
Lucas Clemente
|
57b144bdef
|
fix pending cryptosetup tests
|
2016-04-18 12:38:41 +02:00 |
|
Lucas Clemente
|
f5ec5262d1
|
stop crypto thread after handshake is complete or errors
|
2016-04-18 11:10:00 +02:00 |
|
Lucas Clemente
|
758fdeb3d3
|
change CryptoSetup to use streams
|
2016-04-18 11:03:49 +02:00 |
|